3
0
Fork 0
forked from mirrors/nixpkgs
nixpkgs/modules
Mathijs Kwik a1e86494d0 made challenge-response authentication method configurable for openssh
challenge-response is an authentication method that does not need the
plain text password to be emitted over the (encrypted) connection.
This is nice if you don't fully trust the server.

It is enabled (upstream) by default.

To the end user, it still looks like normal password authentication,
but instead of sending it, it is used to hash some challenge.

This means that if you don't want passwords to be used ever at all,
and just stick to public key authentication, you probably want to
disable this option too.

svn path=/nixos/trunk/; revision=33513
2012-04-01 10:54:17 +00:00
..
config * Fix the generation of resolvconf.conf. 2012-03-26 22:14:47 +00:00
hardware * Move the implementation of boot.kernelModules to udev's postStart. 2012-03-18 14:03:42 +00:00
installer added example for GRUB 2 2012-03-28 10:34:40 +00:00
misc assertions '.msg' doesn't exist => .message 2012-04-01 10:54:06 +00:00
profiles splitted ssh/sshd X11 forwarding logic. Backward compatible change. 2012-03-25 15:42:05 +00:00
programs assertions '.msg' doesn't exist => .message 2012-04-01 10:54:06 +00:00
security keep NIX_PATH in sudo env 2012-03-10 16:11:40 +00:00
services made challenge-response authentication method configurable for openssh 2012-04-01 10:54:17 +00:00
system Making the init interactive shells handle well console kernel parameters 2012-03-28 19:58:44 +00:00
tasks * The idmapd job requires the sunrpc kernel module to be loaded. 2012-03-22 13:01:06 +00:00
testing * Attempt to fix the random "udevadm settle - timeout of 120 seconds 2012-03-19 15:10:39 +00:00
virtualisation * Blackhole the address 169.254.169.254 after we've obtained the user 2012-03-27 14:51:08 +00:00
module-list.nix Changing portmap by rpcbind on nfs services. 2012-03-21 20:37:37 +00:00
rename.nix * wpa_supplicant: automatically figure out the wireless interface(s) 2012-03-04 17:21:14 +00:00